CVE-2014-8488: XSS

Published Dec 10, 2014

Updated

Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.

Affected Software

4 affected components

Yourls Yourls=1.7

Fedoraproject Fedora=20

Fedoraproject Fedora=21

Fedoraproject Fedora=22

Event History

Dec 10, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8488?

CVE-2014-8488 is classified as a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2014-8488?

To fix CVE-2014-8488, update Yourls to version 1.8 or later, which includes a patch for the XSS vulnerability.

Who is affected by CVE-2014-8488?

CVE-2014-8488 affects users of Yourls version 1.7 and Fedora operating systems 20, 21, and 22.

What type of attack can occur due to CVE-2014-8488?

CVE-2014-8488 allows attackers to perform cross-site scripting (XSS) attacks through injected scripts in processed URLs.

What software is vulnerable in CVE-2014-8488?

The vulnerable software associated with CVE-2014-8488 includes Yourls version 1.7 and specific versions of Fedora.